PDPA Thailand
Chapter II Part 1: consent and purpose (sections 19 to 21) – PDPA Thailand

PDPA Thailand S21: Section 21 Purpose limitation and new purposes

What does S21 require?

Personal data must be collected, used or disclosed for the purpose notified to the data subject before or at the time of collection. Processing for a different purpose is allowed only if the data subject is told of the new purpose and consents before the processing, or if this Act or another law allows it.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Chapter II Part 1: consent and purpose (sections 19 to 21) – PDPA Thailand

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.